Disabling RDRAND on Intel CPUs

Is it possible to disable RDRAND CPU feature on Intel CPUs via Xen or QubesOS system settings?

I guess it would help to motivate anyone to jump in with a response if the goal of doing this in terms of Qubes would be presented.

The terminology is actually to “unprivilege” the cpu’s random number generator, which by default is RDRAND. This thread documents the required kernel flag:

Here is another article by madaidan:


And a post referencing how to edit boot parameters: